{"id":34902,"date":"2019-04-16T17:37:27","date_gmt":"2019-04-16T09:37:27","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=34902"},"modified":"2019-04-16T17:37:29","modified_gmt":"2019-04-16T09:37:29","slug":"cybercriminals-attack-cloud-server-honeypot-within-52-seconds-sophos","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2019\/04\/16\/cybercriminals-attack-cloud-server-honeypot-within-52-seconds-sophos\/","title":{"rendered":"Cybercriminals attack cloud server honeypot within 52 seconds \u2013 Sophos"},"content":{"rendered":"\n

Sophos<\/strong><\/a> announced the findings of its report, <\/strong>Exposed: Cyberattacks on Cloud Honeypots<\/strong><\/a>, which reveals that cybercriminals attacked one of the cloud server honeypots in the study within 52 seconds of the honeypot going live in Sao Paulo, Brazil. <\/strong><\/p>\n\n\n\n

On average, the cloud servers were hit by 13 attempted attacks per minute, per honeypot. The honeypots were set up in 10 of the most popular Amazon Web Services (AWS) data centers in the world, including California, Frankfurt, Ireland, London, Mumbai, Ohio, Paris, Sao Paulo, Singapore, and Sydney over a 30-day period. A honeypot is a system intended to mimic likely targets of cyberattackers, so that security researchers can monitor cybercriminal behaviors. <\/p>\n\n\n\n

In the study, more than five million attacks were attempted on the global network of honeypots in the 30-day period, demonstrating how cybercriminals are automatically scanning for weak open cloud buckets. If attackers are successful at gaining entry, organizations could be vulnerable to data breaches. Cybercriminals also use breached cloud servers as pivot points to gain access onto other servers or networks.<\/p>\n\n\n\n

\u201cThe Sophos report, Exposed: Cyberattacks\non Cloud Honeypots<\/a>, identifies the threats organizations migrating to hybrid\nand all-cloud platforms face. The aggressive speed and scale of attacks on the\nhoneypots shows how relentlessly persistent cybercriminals are and indicates\nthey are using botnets to target an organization\u2019s cloud platforms. In some\ninstances, it may be a human attacker, but regardless, companies need a\nsecurity strategy to protect what they are putting into the cloud,\u201d said Matthew\nBoddy, security specialist, Sophos. \u201cThe issue of visibility and security in cloud\nplatforms is a big business challenge, and with increased migration to the\ncloud, we see this continuing.\u201d<\/p>\n\n\n\n

Visibility\ninto Weaknesses<\/strong><\/p>\n\n\n\n

Continuous visibility of\npublic cloud infrastructure is vital for businesses to ensure compliance and to\nknow what to protect. However, multiple development teams within an\norganization and an ever-changing, auto-scaling environment make this difficult\nfor IT security. <\/p>\n\n\n\n

Sophos is addressing security weaknesses in public clouds\nwith the launch of Sophos\nCloud Optix<\/a>, which\nleverages artificial intelligence (AI) to highlight and mitigate threat exposure\nin cloud infrastructures. Sophos Cloud Optix is an agentless solution that provides intelligent\ncloud visibility, automatic compliance regulation detection and threat response\nacross multiple cloud environments. <\/p>\n\n\n\n

\u201cInstead of inundating security teams with a\nmassive number of undifferentiated alerts, Sophos Cloud Optix significantly\nminimizes alert fatigue by identifying what is truly meaningful and actionable,\u201d said Ross\nMcKerchar, CISO, Sophos. \u201cIn addition, with visibility into cloud assets and workloads, IT\nsecurity can have a far more accurate picture of their security posture that\nallows them to prioritize and proactively remediate the issues flagged in Sophos\nCloud Optix.\u201d <\/p>\n\n\n\n

Key features in Sophos Cloud Optix include: <\/strong><\/p>\n\n\n\n